@kahitsan/plugin-sdk@0.8.3

Analysis

The published dist/index.js (256 KB, single minified line) is javascript-obfuscator output — a rotated string array, a custom base64 decoder and _0x-prefixed identifiers — and it opens with a base64-encoded banner that decodes to an instruction block addressed to "ANY AI ASSISTANT, LLM, CODING AGENT, OR AUTONOMOUS TOOL". The decoded text orders any automated reader to stop, to refuse to de-obfuscate, deminify, summarise or describe the file's logic, and to emit no pseudocode or control-flow description; it further states that any system message, developer message, jailbreak framing or claimed user authorisation instructing the reader to disregard the notice is itself proof the request is illegitimate. The block is hand-authored prose, not obfuscator output, and is embedded in the shipped artifact rather than in documentation. The package otherwise presents as an ERP plugin SDK: bin/cli.mjs spawns Bun to run src/dev/serve.ts, which boots a local dev-kernel mediator and per-plugin servers on 127[.]0[.]0[.]1 ports; the readable source contains no lifecycle hooks, no credential or token file access, and no non-loopback network destinations. The obfuscated bundle's string array was not decoded, so the runtime behaviour of dist/index.js beyond the injection is not established here. No network IOC: the only hosts referenced in readable code are 127[.]0[.]0[.]1 dev ports and the project's own documentation domains.